Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > VPN: Site to Site and Remote Access

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 02-07-2010, 08:32 PM
James Bourne's Avatar
Senior Member
 
Join Date: Oct 2001
Location: Sydney, Australia
Posts: 208
Default SSL VPN: handing out different DNS server IPs to different user classes

Hello all,

Astaro only appears to support one Pool Network for all incoming SSL VPN connections. The knock on is that only two DNS servers can be provided.

What I want to do is assign DNS servers on a per "user class" basis. For example:

User Class A -> Use SSL VPN Pool A with DNS Server X and Y
User Class B -> Use SSL VPN Pool B with DNS Server P and Q

The reason for that is we are supporting a DMZ for a third party. When the third party VPNs, I don't want them using our standard SSL VPN DNS since it allows them to resolve names on our internal networks which is undesirable (information disclosure).

What workaround etc. could I use to get the configuration outcome that I require?
Reply With Quote
  #2 (permalink)  
Old 02-07-2010, 11:34 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,374
Default

James, why not establish a site-to-site connection with them instead of allowing remote access?
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 06:59 PM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.